CVE-2024-11941: Drupal core Denial of Service

December 5, 2024

The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).

Sites that do not use the Comment module are not affected.

References

github.com/advisories/GHSA-xq54-x54m-vcpx
github.com/drupal/core
nvd.nist.gov/vuln/detail/CVE-2024-11941
www.drupal.org/sa-core-2024-001

Code Behaviors & Features

Detect and mitigate CVE-2024-11941 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →